CVE-2019-19906
HighAdvisory
Published 19 Dec 2019In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.080
- 94th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 232
- of 17,781 indexed, latest versions
- Container images
- 188
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: cyrus-sasl security, bug fix, and enhancement update
Carried by container images the latest versions of 232 of 17,781 indexed charts deploy, on 188 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cyrus-sasl2deb | 2.1.25.dfsg1-17build1, 2.1.26.dfsg1-13+deb8u1, 2.1.26.dfsg1-14build1, 2.1.26.dfsg1-14ubuntu0.1+3 more | 2.1.25.dfsg1-17ubuntu0.1~esm1, 2.1.26.dfsg1-13+deb8u2, 2.1.26.dfsg1-14ubuntu0.2, 2.1.27+dfsg-1+deb10u1+2 more | 162 |
| cyrus-saslrpm | 2.1.26-5.7.1, 2.1.27-0.3rc7.el8, 2.1.27-1.el8, 2.1.27-2.el8_2 | 0:2.1.27-5.el8, 2.1.26-150000.5.13.1 | 19 |
| cyrus-saslapk | 2.1.27-r1, 2.1.27-r3 | 2.1.27-r2, 2.1.27-r4 | 7 |
- OSV records
- ALPINE-CVE-2019-19906RHSA-2020:4497UBUNTU-CVE-2019-19906DLA-2044-1DSA-4591-1SUSE-SU-2022:3549-1
- Also known as
- USN-4256-1
Charts affected
232 by stars
Container images carrying it
188 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| istio/ | 0c78be035e98 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| jacobalberty/ | c409924e2463 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| jenkinsci/ | a1f33f004659 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| kennethreitz/ | 599fe5e50731 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| konradkleine/ | 181aad54ee64 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| koumoul/ | 7108d47be3b2 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| kubesphere/ | f1b5bf878196 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| library/ | cb079c0d7a57 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| library/ | 41ed3a1a16b6 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| library/ | d723943be12c | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| library/ | 3e00936a4fbd | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| library/ | 6ca49afbcb2b | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| library/ | 691c55aabb3c | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| library/ | 6d95fa56e008 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| library/ | 96104cb965fc | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u1 | 1 |
| library/ | d5d7f368de4a | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| library/ | 2f2b1f4d9d83 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| library/ | 9625c2fb3498 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| library/ | 05bd722c6b0c | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| library/ | 0ae5169e3d0f | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| lightbend/ | b0c9894ac8dd | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| linuxserver/ | 2fbb21fb4903 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| muluder/ | 43b597a93da7 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| mumoshu/ | 02808a23186b | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| mvitale1989/ | 1504ccda06df | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| ncsapolyglot/ | c44b22eb58bb | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| ncsapolyglot/ | 2ba4af461d51 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| neilpeterson/ | fb47732ef36b | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| neilpeterson/ | 3a8877032972 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| neilpeterson/ | 64fd8dab075f | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| neilpeterson/ | 8b645ac1a23e | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| neilpeterson/ | 6527b05d5d03 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| neilpeterson/ | f4940e84ed05 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| neilpeterson/ | 5859d68a6c9f | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| neilpeterson/ | 29d229ab446e | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| neilpeterson/ | 969af3cb8466 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| neilpeterson/ | 39ce9f92e899 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| nodered/ | 070643219ea2 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| omecproject/ | b4ae7d0d6b74 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| omecproject/ | 5715e5648aa0 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| omecproject/ | d109a8e57e71 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| opencord/ | 1d9ee8ce7fab | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| opendatacube/ | 5d810e8504b8 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| opendatacube/ | 91870111837c | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| opendatacube/ | 1b90cdf68831 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| opsmx11/ | 5c50ca123d88 | cyrus-sasl2 | 2.1.25.dfsg1-17ubuntu0.1~esm1 | 1 |
| osixia/ | 58cce1b08592 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| pachyderm/ | 2b27f41d4d02 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| pactfoundation/ | 062d6c710099 | cyrus-sasl | 2.1.27-r2 | 1 |
| pcm32/ | 301fb89914ef | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |